Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c/1d1f7f44-57f5-3448-8375-8ace20c4e947.roa
File:                     1d1f7f44-57f5-3448-8375-8ace20c4e947.roa (raw, json)
Hash identifier:          vQU7h8mMBcHPBuGgvgcCrY6pXmGh7X/g3RG+yh8bLKU=
Subject key identifier:   AF:AC:68:05:BA:54:5E:87:55:3B:CF:24:26:2A:17:86:30:40:7B:8E
Certificate issuer:       /CN=cb309158-c6de-47be-ad39-450cc6e8cb6c
Certificate serial:       010D0C9F4328584F7E7DA76068551499F5E58580
Authority key identifier: 0B:40:D2:D8:74:61:4E:1E:73:75:78:8C:77:03:C3:FB:D0:0B:0C:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c/1d1f7f44-57f5-3448-8375-8ace20c4e947.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     7250
IP address blocks:        173.212.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c/cb309158-c6de-47be-ad39-450cc6e8cb6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c/cb309158-c6de-47be-ad39-450cc6e8cb6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 17 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:a7:60:68:55:14:99:f5:e5:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb309158-c6de-47be-ad39-450cc6e8cb6c
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=4960231a-ed05-4437-b8a5-468ed1ca16b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3d:fe:ff:94:e1:6b:f7:66:7e:62:10:11:f8:
                    5b:a9:94:9e:5d:66:40:7b:fe:b3:79:b2:f0:85:93:
                    f3:7a:a6:a1:c1:db:70:d3:4e:7a:8d:c7:24:9a:ac:
                    8d:44:bb:b4:83:42:56:5c:cb:f1:96:a5:0f:46:ae:
                    98:80:8d:fa:3e:37:e8:a4:2a:46:4f:50:2a:32:c9:
                    d5:8e:c5:b9:fc:fe:89:87:a1:f6:b5:60:ab:20:d3:
                    2f:f4:57:cb:c8:ee:4f:93:35:30:05:1b:81:58:bf:
                    fd:99:91:9b:7c:11:90:75:6c:61:4e:6a:ea:ad:89:
                    78:b3:02:30:40:d6:d2:60:7d:6f:07:ef:77:92:6a:
                    d0:8e:fb:7e:a8:b4:8a:bb:6d:b2:30:d4:31:e1:30:
                    da:1b:2e:4b:5e:ea:91:3f:9b:2b:d2:0e:76:76:8c:
                    32:08:8f:d7:2c:87:0e:50:82:b9:a1:8a:3c:00:d4:
                    5b:79:ed:c8:a0:3d:06:5a:30:32:54:53:47:fd:18:
                    73:8b:4b:2f:e8:05:ef:69:e2:6d:0f:86:e2:e7:e6:
                    f8:ce:a3:7e:8c:f3:48:03:2c:79:dd:98:91:48:0d:
                    c9:0d:11:bd:fd:23:14:5c:0d:7b:2a:06:b8:a7:fe:
                    8e:cd:20:95:94:27:c9:eb:21:02:bf:0b:99:47:2f:
                    66:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AC:68:05:BA:54:5E:87:55:3B:CF:24:26:2A:17:86:30:40:7B:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c/1d1f7f44-57f5-3448-8375-8ace20c4e947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c/cb309158-c6de-47be-ad39-450cc6e8cb6c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:40:D2:D8:74:61:4E:1E:73:75:78:8C:77:03:C3:FB:D0:0B:0C:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cb309158-c6de-47be-ad39-450cc6e8cb6c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.212.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:cb:54:96:18:a4:2a:bd:83:c8:4d:07:be:14:29:28:02:81:
         83:49:46:65:0a:3f:64:5a:8a:30:7c:4c:55:b8:ac:b2:c3:8e:
         5a:97:28:18:d2:00:fe:1d:61:f6:33:ad:9a:38:49:7a:07:a3:
         b7:5d:aa:1c:42:ca:3e:80:cd:bd:02:c4:5a:c1:da:f6:f7:cb:
         2f:38:5e:70:8b:24:30:ba:b3:11:6c:fb:e1:cb:f5:7e:1b:1e:
         fd:18:98:19:f4:d2:c9:50:8d:8c:b1:8f:30:65:7c:ab:c8:74:
         5d:91:cf:5c:cb:84:e5:6b:42:b9:1d:80:f1:fe:08:d4:d5:ca:
         23:4d:46:25:20:ca:b7:37:3f:a2:21:da:a2:15:5a:ca:43:cd:
         5c:c5:53:19:99:60:b7:dd:96:db:e3:ab:cc:ba:92:c8:e3:cc:
         9f:62:86:b6:37:11:ff:02:d3:17:33:77:5c:96:14:08:41:ae:
         49:55:4e:bf:88:1f:4e:f1:1f:08:6c:d2:55:a6:bb:09:91:6b:
         ca:65:06:30:63:90:4d:f5:61:2f:f1:15:8d:06:dd:20:be:0c:
         5c:61:e5:c0:8f:13:7a:ab:65:ba:77:e5:85:f5:44:8f:3f:56:
         aa:55:3f:b9:c0:f7:70:eb:da:6d:e8:f4:9b:05:fe:7c:2f:9e:
         e9:31:61:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fadgaFUUmfXlhYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2IzMDkxNTgtYzZkZS00N2JlLWFkMzktNDUwY2M2ZThj
YjZjMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk
NDk2MDIzMWEtZWQwNS00NDM3LWI4YTUtNDY4ZWQxY2ExNmIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz3+/5Tha/dmfmIQEfhbqZSeXWZAe/6zebLw
hZPzeqahwdtw0056jcckmqyNRLu0g0JWXMvxlqUPRq6YgI36PjfopCpGT1AqMsnV
jsW5/P6Jh6H2tWCrINMv9FfLyO5PkzUwBRuBWL/9mZGbfBGQdWxhTmrqrYl4swIw
QNbSYH1vB+93kmrQjvt+qLSKu22yMNQx4TDaGy5LXuqRP5sr0g52dowyCI/XLIcO
UIK5oYo8ANRbee3IoD0GWjAyVFNH/Rhzi0sv6AXvaeJtD4bi5+b4zqN+jPNIAyx5
3ZiRSA3JDRG9/SMUXA17Kga4p/6OzSCVlCfJ6yECvwuZRy9mOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK+saAW6VF6HVTvPJCYqF4YwQHuOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jYjMw
OTE1OC1jNmRlLTQ3YmUtYWQzOS00NTBjYzZlOGNiNmMvMWQxZjdmNDQtNTdmNS0z
NDQ4LTgzNzUtOGFjZTIwYzRlOTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvY2IzMDkxNTgtYzZkZS00N2JlLWFk
MzktNDUwY2M2ZThjYjZjL2NiMzA5MTU4LWM2ZGUtNDdiZS1hZDM5LTQ1MGNjNmU4
Y2I2Yy5jcmwwHwYDVR0jBBgwFoAUC0DS2HRhTh5zdXiMdwPD+9ALDIUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9jYjMwOTE1OC1jNmRlLTQ3YmUtYWQzOS00NTBj
YzZlOGNiNmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErdQgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD/LVJYYpCq9g8hNB74UKSgCgYNJRmUKP2RaijB8TFW4rLLDjlqXKBjS
AP4dYfYzrZo4SXoHo7ddqhxCyj6Azb0CxFrB2vb3yy84XnCLJDC6sxFs++HL9X4b
Hv0YmBn00slQjYyxjzBlfKvIdF2Rz1zLhOVrQrkdgPH+CNTVyiNNRiUgyrc3P6Ih
2qIVWspDzVzFUxmZYLfdltvjq8y6ksjjzJ9ihrY3Ef8C0xczd1yWFAhBrklVTr+I
H07xHwhs0lWmuwmRa8plBjBjkE31YS/xFY0G3SC+DFxh5cCPE3qrZbp35YX1RI8/
VqpVP7nA93Dr2m3o9JsF/nwvnukxYbA=
-----END CERTIFICATE-----
Generated at Fri Oct 16 12:33:56 2026 by rpki-client